Effective Date: September 27, 2026 | Last Updated: October 2, 2026
Veda Culinary Science LLC ("we," "us," or "our") operates the BakingBuddhi mobile application and web service (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
When you create an account or sign in with Google, Apple, Facebook, or email magic link, we collect:
When you sign in with Apple, we receive your name and email address as authorized through the Apple Sign In dialog. Apple may provide a private relay email address if you choose to hide your email. We do not receive any other data from your Apple account. Apple's handling of this data is governed by Apple's Privacy Policy.
When you sign in with Facebook, we receive your public profile information (name, profile picture) and email address as authorized through the Facebook Login dialog. We do not access your Facebook friends list, posts, photos, or any other Facebook data beyond what is listed above. We do not sell, license, or purchase data obtained from Facebook/Meta.
We store the following content that you create or configure within the app:
When you report inaccurate AI-generated content, BakingBuddhi stores an excerpt of up to the first 500 characters of the response, a report reason, the response length when supplied, a creation time, and an internal link to your account for review. Report details are restricted to backend and authorized operational access. Account deletion removes the account link; the excerpt can remain and may still contain identifying information. The software includes a cleanup process for reports older than 90 days; a configured process does not guarantee that every report is removed at that point.
Location and baking environment. If you use a location feature, BakingBuddhi may receive latitude and longitude at the precision supplied by your device or browser, or coordinates for a place you selected in an older app version. Your device or browser may use GPS or other signals; BakingBuddhi cannot guarantee which source it used or the physical accuracy. Before the updated backend takes over, older app versions may send typed city or postal-code search text and selected coordinates through BakingBuddhi to Open-Meteo for place search, elevation and current outdoor weather. In the updated Get my elevation and humidity data flow, BakingBuddhi sends device-supplied coordinates to its backend. The backend estimates terrain elevation from a bundled NOAA ETOPO 2022 dataset without sending your coordinates to NOAA, and sends coordinates truncated to four decimal places to MET Norway for outdoor humidity and temperature forecast estimates. None of these readings measures humidity inside your kitchen.
BakingBuddhi can keep your selected coordinates at their original device or place-search precision, place label, source, elevation estimate and update times on your device for later baking guidance. The updated app holds recent forecast weather in memory for up to 50 minutes and clears an older displayed forecast when a new forecast is unavailable. Chat-session context and, in some account synchronization cases, account preferences can also keep location and elevation after an active session ends. BakingBuddhi's server may cache a four-decimal location grid, forecast values and MET cache headers across server instances until the forecast expires, with deletion scheduled no later than 24 hours after MET's Expires time. A new reading replaces the saved environment on the device; signing out clears that device copy only. Deleting a chat session removes its context, while clearing messages alone does not. Account deletion attempts scoped profile and chat-session removal. Older records may still contain weather collected under earlier versions until those stored values are removed. Backups, platform logs and provider logs may retain related information after you sign out or delete account content. Signing out, clearing messages or deleting a chat does not guarantee immediate removal of those copies. Contact BakingBuddhi Support if you have questions about their retention or deletion.
Shared-cache privacy limit. The outdoor forecast cache is shared across BakingBuddhi users. A signed-in person who probes a particular small location grid may sometimes infer from forecast availability or response time that someone recently requested a forecast there. The response does not name that person, but someone with other information might connect the location to them. BakingBuddhi limits requests and hides cached-versus-uncached results during provider-wide throttling or global request spacing, but cache capacity and ordinary response timing cannot fully remove this inference.
When you use the Live Voice feature, your microphone audio is streamed in real-time to Google's Gemini AI API for speech processing. This microphone audio is transient — it is processed in real-time and not stored by BakingBuddhi. Google's handling of this data is governed by Google's Privacy Policy.
Recipe Audio Overview is a separate feature. When you request it, BakingBuddhi sends narration text to Google Gemini to generate spoken audio. If a saved narration is unavailable, the recipe text may first be sent to Gemini to generate a short narration. Generated audio is returned to your app or browser and held in memory for playback; BakingBuddhi does not save that generated audio to chat history. A narration script may be saved with the recipe message and follows chat-history retention. Audio Overview does not require microphone capture.
BakingBuddhi's recipe generation, baking guidance, photo understanding, and voice features are powered by Google Gemini, an artificial-intelligence service operated by Google LLC ("Google"). To generate a response, the app sends the following data to Google Gemini:
We send this data to provide the AI features described above. We present an in-app disclosure and obtain your explicit consent before any data is sent to Google for AI processing, and AI features remain disabled until you agree. For information about Google's privacy practices, see the Google Privacy Policy. We do not sell your data, and you may withdraw your consent at any time from the avatar menu: open About (a sibling entry next to Kitchen Settings, not nested inside it) and use Withdraw AI Consent under AI & Data. Withdrawing disables all AI features until you accept the disclosure again.
For purchases processed by Apple as In-App Purchases, payment processing for both subscriptions and one-time usage boosts is handled entirely by Apple as In-App Purchases, billed to your Apple ID. We never receive or store your payment card information for these purchases; Apple may share limited transaction information with us (e.g., a purchase receipt confirming the product and price) for account and entitlement management. Apple's handling of this data is governed by Apple's Privacy Policy.
For purchases processed by Stripe, including verified Android alternative-billing purchases, payment processing is handled entirely by Stripe, Inc. We do not directly collect, store, or have access to your full payment card numbers. Stripe may share limited billing information with us (e.g., last four digits, expiration date, billing address) for account management. Stripe's handling of your data is governed by the Stripe Privacy Policy.
Historical or legacy purchases processed by Google Play remain distinct from Stripe alternative billing. BakingBuddhi uses original subscription and purchase information to identify the provider; the current device, installation store, sign-in provider or location is not a substitute. This does not establish the presence or absence of remaining Google Play subscribers or obligations.
BakingBuddhi offers a free trial. To stop the same device from claiming that trial repeatedly, we create a device signature when you first complete onboarding. It is derived from your browser or app user agent, your preferred language, your screen dimensions and colour depth, and your network (IP) address. We store only a one-way cryptographic hash of these values together with a separate hash of your IP address — not the raw values themselves — and we compare a normalized form of your email address against existing accounts. That normalized email address is itself stored only as a one-way hash, never in readable form.
This signature is used solely to detect repeat trial sign-ups. It is never used for advertising, never used to track you across other websites or apps, and never sold or shared with third parties. Because its whole purpose is to recognise a device or email address that has already had a trial, the device-signature hash and the email hash are retained after account deletion, with the account link removed and the IP-address hash deleted by the deletion process. These hashes can still be used to recognize a repeat trial attempt; they should not be described as anonymous.
If you believe your account has been incorrectly flagged — for example because you share a device or a home network with someone who already used a trial — contact us at support@bakingbuddhi.ai and we will review it.
BakingBuddhi keeps account-linked AI usage and cost records to apply your shared usage allowance, prevent duplicate charges and investigate accounting failures. For metered recipe audio and its optional narration summary, these records include internal attempt identifiers, the model used, the applicable pricing version and time, the usage period, the attempt outcome and charged cost. These cost records do not contain the narration text or generated audio; chat-history records are separate. Recipe audio cost-attempt details are included in your account data export.
This metadata follows the associated usage records and account-deletion cleanup. We do not assign it a new fixed retention period or promise immediate removal while cleanup is unfinished. Provider records and backup or operational copies remain subject to their separate controls described in Section 5.
We use the information we collect to:
We share data with the following third-party service providers, solely for the purpose of operating the Service:
| Service | Provider | Data Shared | Purpose |
|---|---|---|---|
| AI Processing | Google (Gemini API) | Messages and other listed AI content; when configured, device-supplied or earlier saved search-result coordinates, place label and elevation, and available outdoor forecast values; Live Voice audio on its separate path; recipe narration text and, when needed, recipe text for Audio Overview | Recipe generation and baking guidance, including environment context for relevant recipes; generation of recipe narration and spoken Audio Overviews |
| Outdoor weather forecast | MET Norway (Locationforecast) | Device coordinates truncated to four decimal places by BakingBuddhi's backend | Retrieve estimated outdoor humidity and temperature for baking guidance |
| Older place search and weather/elevation | Open-Meteo | Before the updated backend takes over, older versions may send typed city or postal-code search text and selected coordinates or device-supplied latitude and longitude through BakingBuddhi's backend | Find a selected place and retrieve outdoor weather and elevation for baking guidance in older app versions |
| Authentication | Google (OAuth 2.0) | Email, name, profile photo | Secure sign-in |
| Authentication | Meta/Facebook (OAuth 2.0) | Email, name, profile photo | Secure sign-in |
| Authentication | Apple (Sign in with Apple) | Email (or private relay email), name | Secure sign-in |
| Database | Supabase | Account and profile data | Data storage and retrieval |
| Payment Processing | Stripe | Billing information (via Stripe-hosted forms) | Billing for Stripe-processed purchases |
| Payment Processing | Apple (In-App Purchase) | Purchase/transaction receipt | Billing for Apple In-App Purchases |
| Error Monitoring | Sentry | Error reports, performance data (no PII) | Application stability and performance |
| Hosting | Google Cloud | Server traffic (encrypted) | Backend infrastructure |
For terrain elevation in the updated flow, BakingBuddhi reads a bundled NOAA ETOPO 2022 dataset on its backend; it does not send your coordinates to NOAA for that lookup. We do not sell, rent, or trade your personal information to any third party. This table describes the information sent for the listed services; it does not state a provider retention, deletion or protection guarantee. For AI processing specifically (Google Gemini), we obtain your explicit in-app consent before data is shared — see Section 1.5.
While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure.
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, please contact us using the information below.
BakingBuddhi uses artificial intelligence (Google Gemini) to generate recipe suggestions, baking guidance, and cooking advice. While we strive for accuracy:
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy, contact us at:
Veda Culinary Science LLC
Email: privacy@bakingbuddhi.ai
Website: bakingbuddhi.ai